← All credits
Francesco Carlucci
565 vulnerability records and advisories credit this contributor.
CVE-2024-5666
Extensions for Elementor <= 2.0.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
CVE-2023-6880
Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-9118
QS Dark Mode Plugin <= 2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-2141
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
CVE-2024-9388
Black Widgets For Elementor <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-1047
ThemeIsle SDK <= Various Versions - Missing Authorization
CVE-2024-11083
ProfilePress <= 4.15.18 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-10775
Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure
CVE-2024-10269
Easy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-1731
Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection